a review of business plans, analysis
of financial and operational reports, and a review of miscellaneous information (e.g., industry
information, process documentation, etc.). For validation, the assessment results are discussed with
the appropriate levels of management.